Login, Roles, Rights = Identity and Access Management (IAM)
Identity and Access Management (IAM) is the process of bringing together personal data from different systems into a single identity. For example, if a person's name changes, only one change is required in the personnel (department III) system. This is then synchronised with the IAM to provide the latest information to the target systems. The university expects a number of benefits from the IAM, such as increased data protection, improved data quality and constant up-to-dateness. In addition, other IT systems can be more easily integrated into the administrative and scientific network, which goes hand in hand with simpler personnel and rights management.
User account
In order to access the data services of the University of Bamberg, IT-Service sets up a user account in the user database with a user name (BA-number) and a personal password. With the user name and the password the user logs in to the data services and proves his identity. The user administration of the member accounts of the university is automated from entry to exit (= user lifecycle).
[This interests me! - Read more ...
in German]
Data services
Based on the access rights stored with the data services (e-mail, data storage, etc.), the system grants or denies access to the persons logged in with the user account (BA number) and thus identified.
[This interests me! - Read more ...
in German]
Institutional abbreviation
For task-related data services, access rights are assigned by the institutions that own the data services. The naming of the data services is done via defined institution abbreviations (e.g. e-mail account sekretariat.its@uni-bamberg.de). Although the institution abbreviations, which are assigned according to a defined allocation procedure, were originally introduced only to standardise the naming of the data services and to resolve naming conflicts (after all, there are several secretariats), they also serve to allocate the rights of use to the institutions and the responsible persons.
[This interests me! - Read more ...
in German]
Weblogin
The University of Bamberg often enters into agreements with external or even commercial providers to allow members of the University of Bamberg to use their data services. In the past, access to these external data services was often limited to the university's data network (to which users can also "dial in" via VPN). Or it was linked to the possession of a University of Bamberg e-mail address via various "licensing mechanisms". Logging on to such restricted services can now be realised with the help of a weblogin via Shibboleth.
[This interests me! - Read more ...
in German]